NewsLayer.com
NewsLayer PulseLIVEBTC$81,376+0.23%ETH$2,634-0.09%SOL$110.97-2.85%XRP$1.43+1.04%DOGE$0.0896+1.89%ADA$0.2296+3.21%Total Cap$2.76T+0.69%Layer Index59 Neutral

Crypto

breaking

North Korea-Linked Hackers Used Fake Jobs to Steal Crypto From IT Workers

North Korea-linked hackers reportedly used fake job opportunities to target IT workers and steal cryptocurrency. The campaign relied on employment-themed social engineering to gain access to victims or their digital assets.

CryptoRank

Publisher

Sep 18, 2026 at 10:33 PM UTC · Updated 19시간 전 · 1 분 소요

North Korea-Linked Hackers Used Fake Jobs to Steal Crypto From IT Workers
Image via CryptoRank

Key Signal

30,000+ devices infected globally

Last Updated

19시간 전

A North Korea-linked hacking group used fake job offers to target IT workers and steal cryptocurrency, Japan’s NPA said Friday.

The group, known as WaterPlum, infected more than 30,000 devices across over 100 countries from December 2025 through July 2026. Investigators also found information linked to more than 7,000 crypto wallets.

At least ¥1.7 billion in cryptocurrency later moved to wallets controlled by the group, according to the NPA.

Fake Jobs Target IT Workers

WaterPlum posed as recruiters for companies working in AI, crypto and NFTs. Attackers contacted developers through social media, job websites and freelance platforms before sending technical interviews or coding assignments.

Some applicants received development files or projects and were asked to run code while completing the tasks. The NPA said attackers embedded malicious code in some files, al…

Read The Full Article North Korea-Linked Hackers Used Fake Jobs to Steal Crypto From IT Workers On Coin Edition.

빠른 답변

How did the hackers reportedly target IT workers?

They reportedly used fake job opportunities as a lure. The excerpt describes the tactic as a way to steal cryptocurrency from IT workers.

Who is linked to the alleged crypto theft campaign?

The alleged hackers are described as North Korea-linked. The excerpt does not identify a specific group or individuals.

What was reportedly stolen in the campaign?

The campaign reportedly stole cryptocurrency from IT workers. No details about the amount or specific assets are provided.

Sourced by

Originally reported by CryptoRank

NewsLayer coverage based on externally reported material.

The Daily Brief

The onchain economy, before your day starts.

Curated markets, onchain insights, and key headlines — delivered every weekday morning.

Weekdays · Free · ~5 minute read

0

Applause

Was this article helpful?

Keep Reading

관련 기사